www.bmwlat.com

- Bayerische Motoren Werke AG -

Issued by Symantec Class 3 Secure Server CA - G4

About this certificate

This digital certificate with serial number 6e:5e:26:14:66:87:e8:89:87:78:d1:92:2a:e2:4e:e1 was issued on by Symantec Corporation.

With 10 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Bayerische Motoren Werke AG

Organization: Bayerische Motoren Werke AG
State / Province: BAYERN
Locality: MUENCHEN
Country: DE

Symantec Corporation

Organization: Symantec Corporation
Organization unit: Symantec Trust Network
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 6e:5e:26:14:66:87:e8:89:87:78:d1:92:2a:e2:4e:e1
Serial Number (int): 146703927788902982978678423574664072929
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 5f:60:cf:61:90:55:df:84:43:14:8a:60:2a:b2:f5:7a:f4:43:18:ef

Fingerprint (sha1): 6d:00:86:63:1b:df:6d:07:43:a2:2a:5c:db:7f:26:37:2d:9a:26:43
Fingerprint (sha256): c1:c0:1d:e7:59:de:45:ea:4b:39:95:39:80:59:0d:97:4f:d4:50:b9:70:6e:0d:c2:d7:af:d1:0b:bd:25:26:c2

Issuing Certificate URL: http://ss.symcb.com/ss.crt

Revocation information

OCSP Server: http://ss.symcd.com
CRL Distribution Point: http://ss.symcb.com/ss.crl

Check the revocation status for certificate www.bmwlat.com

10

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.bmwlat.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www-legacy.m6.bmw.com
www-legacy.m6.bmw-int6.com
www-legacy.bmw.fr
www-legacy.bmw-int4.com
bmwlat.com
www.bmwbkk.de
www.bmw.sr
www.bmw-pma.com.sg
www-legacy.m6.bmw-int7.com
www.bmwlat.com

Other certificates including the domain name bmwlat.com

(limited to 100 certificates)
www.bmw.com
www.bmw.com
www.bmw.com
www.bmw.com
www.bmw.com
www-origin-proda2.bmw.com
www.bmw.com
www.bmw.com
www.bmw.com
www-origin-proda2.bmw.com
www.bmw.com
www.bmw.com
www.bmw.com
www.bmw.com
www-origin-proda2.bmw.com
www.bmw.com
www.bmwlat.com
www.bmw.com
www.bmw.com
www.bmw.com
www.bmw.com
www-origin-proda2.bmw.com
www.bmw.com
www.bmw.com
www.bmw.com
www.bmwlat.com
www.bmw.com
www.bmwlat.com
www.bmwlat.com
www.bmw.com
www.bmw.com
www.backend.bmwlat.com
www.bmw.com
www.bmw.com
www.bmw.com
www.backend.bmwlat.com
www.bmwlat.com
www.bmw.com
www.bmw.com
www.bmw.com
www.bmw.com
www.bmw.com
www.bmw.com
www.bmw.com
www.bmwlat.com
www.bmw.com
www-origin-proda2.bmw.com
www.bmw.com
www.bmwlat.com
www.bmwlat.com
www.bmw.com
www.bmw.com
www.bmwlat.com
www.bmw.com
www.bmw.com
www.bmw.com
www.bmw.com
www-origin-proda2.bmw.com
www-origin-proda2.bmw.com
www.bmwlat.com
www.bmwlat.com
www.bmwlat.com
www.bmwlat.com
www.bmwlat.com
www.bmwlat.com
www.bmw.com
www.bmwlat.com
www.backend.bmwlat.com
www.bmw.com
www.bmwlat.com
www-origin-proda2.bmw.com
www.bmw.com
www.bmw.com
www.bmw.com
www-origin-proda2.bmw.com
www.bmw.com
www.bmw.com
www-origin-proda2.bmw.com
www.bmw.com
www.bmw.com
www.bmwlat.com
www.bmwlat.com
www.bmw.com
sip.bmw.de
www-origin-proda2.bmw.com
www.bmwlat.com
www.bmw.com
www.bmw.com
www.bmwlat.com
www.bmw.com
www.bmw.com
www.bmw.com
www.bmw.com
www.bmw.com
www.bmw.com
www.bmw.com
www.bmwlat.com
www.bmwlat.com
www.bmw.com
www.bmw.com

Certificate

The complete raw certificate details for www.bmwlat.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwjhTfmXqyXvSJ5Pqw80W
puw3AOBWOimTVUJNLm5g5Kp+MuqW/Ci6w8w9fOuVOFaKT9l3YkYqnic2WoP9Sz7Z
O/0PIR1YzS7P1LeGPt4zNA3ViZtE0BfOBuG0QdhVpjISVBxRA0j8ygR2NwXmVrr7
kzvend8imME8l1ZcrcuPaR8I06PxYqOkGokN9/ePCP+T/b6CJsm0e0tWlC7dyPab
RyxgRkpbYY6sqs8m0PW/bsyFs5WP6lqbRKlfWnQmK1Pk6Ym+JxbucMDMxhW+R0hp
mfka1oPUzG60dCa9pkGvvnUAQy+OKzj0Uiy4G0pdDnzfEUFaNzWU4WR+uq+dhwmN
bwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 146703927788902982978678423574664072929
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Trust Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Class 3 Secure Server CA - G4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-11-17 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-24 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'BAYERN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'MUENCHEN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bayerische Motoren Werke AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.bmwlat.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24518006621919684308688779309175704512240012943257757678059480667832570081394022606595333004739051715529099968144276901915091991526447284475231716512944028744832021530991785748617027701303079347966681767232933810992614780693006952678765785632420784888082888192669562282807399905600773233299309795636759087391250280337557117363539888750697792641349653361615264804538143398295542108365725514933289726302935978357718447234812457336504429257507705954850732004676061182312112351499523256699071445518214888247113138035011816935279643537143788155349031437651307825255534868522218042774785584770873346623340359341458934304111
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (201 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-legacy.m6.bmw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-legacy.m6.bmw-int6.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-legacy.bmw.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-legacy.bmw-int4.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bmwlat.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmwbkk.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw.sr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmw-pma.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-legacy.m6.bmw-int7.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bmwlat.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://d.symcb.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://d.symcb.com/rpa'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcb.com/ss.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5f60cf619055df8443148a602ab2f57af44318ef
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcb.com/ss.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00349d842dade90120ca92595931a70b5cf6e760324b2cdb56494da84748711ff0a6e9b10cba15e8481b27f5649ae86018e4a069bc318e5a4735f809efbef124d268f7c811ce322c20ace8b1d6571e553680716232aced4c35043e2ba86bb4646b35b7cc880b10bb6501dd820c7a35c63b05985c9765b1d8d26cca96e7cb3ef8e7500fc680817b7200cd927fb9e3b2c795dcd08c0d3b293edc0cfbcc303cc811e76b6f43efac8ef86aa07780bb13a72fe93e5598d22f9448159ba324584a7db6addc9eccd6fb9bf0ee700deffee3c22f84f221e16465815a35e70460145efb9a8e8c9f067fe530133b4afefbebc06ca6c39ea8e3c7a5f9d8c14daee1229797d39a